Application Security Engineer arbeitnow Teliogroup Hamburg · 9/27/2026

Primetime; Hamburg; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Benefits dieser Stelle

30 Tage Urlaub

Betriebliche Altersvorsorge

Pluxee-Gutscheine

JobRad

HVV-Zuschuss oder Tiefgaragenstellp.

EGYM Wellpass

Zusammenfassung

Primetime sucht einen Application Security Engineer, der die Sicherheit unserer Produkte und Plattformen stärkt. Sie arbeiten eng mit Engineering-, Platform- und Security-Teams zusammen, um sichere, resiliente Software zu entwickeln und eine Security-First-Kultur voranzutreiben.

Sie gestalten Sicherheit im gesamten SDLC, führen Threat Modeling, Architektur-Reviews und Sicherheitsbewertungen durch, integrieren Security-Tools in CI/CD und unterstützen Remediation von Schwachstellen.

Qualifikationen

• Mindestens 5 Jahre Erfahrung in Product/Application Security oder verwandten Bereichen.
• Sichere Softwareentwicklungspraktiken und Kenntnisse zu OWASP.
• Nachweisliche Erfahrungen in Threat Modeling, Architektur- Reviews und Code-Reviews.
• Hands-on Erfahrung mit SAST, DAST, SCA, Dependency-Scanning und Secrets-Scanning.
• Starke Kenntnisse in Application Security, API Security & Distributed-System Security.
• Erfahrung mit CI/CD-Pipelines und DevSecOps-Prinzipien.
• Zusammenarbeit mit Software-Entwicklern, Architekten und Plattform-Teams.
• Fließende Englischkenntnisse; Deutschkenntnisse von Vorteil.

Aufgaben

• Sicherheit im gesamten SDLC vorantreiben und sicherstellen.
• Bedrohungsmodellierung, Architektur-Reviews und sicherheitsbezogene Bewertungen durchführen.
• Schwachstellen identifizieren, priorisieren und Remediation unterstützen.
• Sicherheits-Tools in CI/CD integrieren und laufend verbessern.
• Sichere Codierungsstandards definieren und in Engineering-Teams fördern.
• Authentifizierung, Autorisierung, Identity-Management prüfen.
• Penetration Testing unterstützen und gezielte Sicherheitstests leiten.
• Sicherheitsrichtlinien, Standards und Awareness-Initiativen mitgestalten.
• Zusammenarbeit mit Engineers/Architekten, DevOps und Plattform-Teams, DevSecOps-Kultur stärken.

Kenntnisse

Threat modeling

Application security

SAST/DAST/SCA

CI/CD security tooling

Security architecture reviews

DevSecOps

Secure coding practices

Authentication & identity security

English proficiency

Tools

SAST tools

DAST tools

SCA tools

Dependency scanning

Secrets scanning

Jobbeschreibung

As our Application Security Engineer, you will play a key role in shaping and strengthening the security of our products and platforms. Working closely with highly skilled engineering, platform, and security teams, you will help build secure, resilient, and trusted software while driving a security-first culture across the organization. This is an opportunity to make a measurable impact on modern products, influence security strategy, and continuously develop your expertise in a collaborative and innovative environment.

• Drive product security across the entire software development lifecycle (SDLC).
• Perform threat modeling, architecture reviews, and security assessments for applications, APIs, and distributed systems.
• Identify, assess, prioritize, and support the remediation of security vulnerabilities.
• Integrate, operate, and continuously improve security tooling within CI/CD pipelines, including SAST, DAST, SCA, dependency scanning, and secrets-scanning solutions.
• Define, promote, and support secure coding standards and security best practices across engineering teams.
• Review and advise on authentication, authorization, identity management, secrets management, and service-to-service communication designs.
• Support penetration testing activities, conduct targeted security testing, and drive remediation efforts.
• Contribute to security policies, standards, and security awareness initiatives.
• Partner closely with software engineers, architects, and platform teams to embed security into development processes and strengthen our DevSecOps culture.

Type: Onsite

Your mission

As our Application Security Engineer, you will play a key role in shaping and strengthening the security of our products and platforms. Working closely with highly skilled engineering, platform, and security teams, you will help build secure, resilient, and trusted software while driving a security-first culture across the organization. This is an opportunity to make a measurable impact on modern products, influence security strategy, and continuously develop your expertise in a collaborative and innovative environment.

• Drive product security across the entire software development lifecycle (SDLC).
• Perform threat modeling, architecture reviews, and security assessments for applications, APIs, and distributed systems.
• Identify, assess, prioritize, and support the remediation of security vulnerabilities.
• Integrate, operate, and continuously improve security tooling within CI/CD pipelines, including SAST, DAST, SCA, dependency scanning, and secrets-scanning solutions.
• Define, promote, and support secure coding standards and security best practices across engineering teams.
• Review and advise on authentication, authorization, identity management, secrets management, and service-to-service communication designs.
• Support penetration testing activities, conduct targeted security testing, and drive remediation efforts.
• Contribute to security policies, standards, and security awareness initiatives.
• Partner closely with software engineers, architects, and platform teams to embed security into development processes and strengthen our DevSecOps culture.

Your profile

• 5+ years of experience in Product Security, Application Security, Software Security, Secure Software Development, or a related field.
• Strong understanding of secure software development practices and common application security vulnerabilities.
• Proven experience performing threat modeling, architecture reviews, code reviews, and application security assessments.
• Hands-on experience with SAST, DAST, SCA, dependency-scanning, and secrets-scanning tools.
• Strong knowledge of application security, API security, and distributed-system security.
• Experience securing authentication, authorization, and identity-related workflows.
• Solid understanding of OWASP, CWE, security testing methodologies, and modern security engineering practices.
• Experience working with CI/CD pipelines and applying DevSecOps principles.
• Ability to collaborate effectively with software engineering, platform, and DevOps teams.
• Fluent English skills are required; German language skills are a plus.

Nice to have

• Development experience in C#, .NET, JavaScript/TypeScript, Python, or similar programming languages.
• Experience securing cloud-native applications and services in Azure and/or AWS environments.
• Relevant security certifications such as OSCP, CSSLP, OSWE, or GIAC Secure Development certifications.
• Experience working in agile software development environments.

Why us?

• Modernes, zentral gelegenes Büro: Nur 5 Gehminuten von der Haltestelle Bahrenfeld entfernt - bequeme Anreise garantiert!
• Offene Unternehmenskultur: Tauche ein in ein internationales Arbeitsumfeld, in dem Ideen und Vielfalt gefördert werden.
• Kollegiale Arbeitsatmosphäre: Genieße eine Arbeitsatmosphäre, die von Zusammenarbeit und Hands-on-Mentalität geprägt ist.
• Hybrides Arbeitsmodell:Flexibilität - Kombiniere Arbeit vor Ort und im Home Office.
• 30 Tage Urlaub: Mehr Zeit für Erholung und Freizeit. Zusätzliche freie Tage am 24.12., 31.12. sowie einen halben Tag an deinem Geburtstag.
• Attraktives Vergütungspaket: Wir honorieren deine Leistung angemessen.
• Betriebliche Altersvorsorge:Mit großzügigem 25% Arbeitgeber-Zuschuss bis zu 75 €.
• Pluxee-Gutscheine:Für unbeschwerte Verpflegung während der Arbeit.
• HVV-Abo- oder Tiefgaragenstellplatz-Zuschuss: Unterstützung für Deine bequeme
• JobRad:Nutze die Möglichkeit, nach der Probezeit ein JobRad zu leasen.
• EGYM Wellpass:Nutze die Möglichkeit, nach der Probezeit dich körperlich und mental fit zu halten.